Live data from Hacker News

Lulu – Mac open-source firewall that aims to block unknown outgoing connections

objective-see.com

21–30 of 158 posts

Re: Lulu – Mac open-source firewall that aims to block unknown outgoing connections

#21

Works great. I replaced Little Snitch with it. I like it's simple interface and simple value proposition.

you know LuLu and Little Snitch are made by the same company (obj-see ... obj-c ???)

No, Little Snitch is made by Objective Development - https://obdev.at/

Re: Lulu – Mac open-source firewall that aims to block unknown outgoing connections

#22

What about the same for Linux? I would pay twice the LittleSnitch price for it if it was working really good.

I'm aware no one asked, but in case anyone was scanning for Windows, simplewall is a reasonable alternative, both free and open source (development powered by donations): https://www.henrypp.org/product/simplewall I'm not affiliated with them.

Thank you very much, I'll give it a try. I use Sphinx software Windows Firewall Control now.

Re: Lulu – Mac open-source firewall that aims to block unknown outgoing connections

#24
post #3

Does this mean Little Snitch's days are numbered?

little snitch looks way better and has a better UX, so nope

Personally I find the LS interface way too complex and intimidating (and I say this as a long time macOS / iOS developer).

Lulu has a quirky interface, but it's much clearer. Of course it also helps that it's free and open source.

Re: Lulu – Mac open-source firewall that aims to block unknown outgoing connections

#27
post #3

Does this mean Little Snitch's days are numbered?

I'm curious about this, as it's one of 3 kexts that I get warned about support being withdrawn in a future version of macOS (UAD being one of the others, I forget the 3rd).

I could probably live without LS, but the UAD support being withdrawn is quite concerning given the level of investment I have there.

Re: Lulu – Mac open-source firewall that aims to block unknown outgoing connections

#28
I'm gonna be the thick one. What advantages does it give me when I have something like pi-hole as my DNS server on the internal network? Surely majority of connections need a DNS resolution. Would love to see some stats showing the amount of blocked connections that bypassed DNS.

Re: Lulu – Mac open-source firewall that aims to block unknown outgoing connections

#29
post #7

Has totally replaced Little Snitch for me recently after being increasingly annoyed by it over a decade of using it. This type of software requires lots of trust in the developer and objective-see has earned that trust with the many great projects they provide.

What made you lose trust in Little Snitch or its developer?

Re: Lulu – Mac open-source firewall that aims to block unknown outgoing connections

#30
post #10

I wonder how this works with respect to apple's "special exemptions" for its own applications. (bypass NEFilterDataProvider)

Threre are no indications that Apple is willing to compromise and allow application firewalls to block Apple softwares that Apple believes should be able to access the internet, even if the user doesn't want it too.

It's a gross invasion of privacy, and a security risk.

(By the way, even in Lulu, some Apple system software - apsd, automount, helpd, mDNSResponder, mount_nfs, mount_url, ocspd, sntp, trustd - are whitelisted and cannot be blocked by the user even if they want to, and that's bit disappointing).

Post reply on HN